CVE-2012-1620

slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.6 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:P/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 27%
VendorProductVersion
sucklessslock
0.9
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
suckless-tools
bullseye
46-1
fixed
sid
47-1
fixed
trixie
47-1
fixed
bookworm
47-1
fixed
Common Weakness Enumeration
References
http://hg.suckless.org/slock/rev/891a4984aba6
http://secunia.com/advisories/48700
http://www.openwall.com/lists/oss-security/2012/04/06/1
http://www.openwall.com/lists/oss-security/2012/04/06/2
http://www.osvdb.org/81035
http://www.securityfocus.com/bid/52922
https://bugs.gentoo.org/show_bug.cgi?id=401645
https://bugzilla.redhat.com/show_bug.cgi?id=786310
https://exchange.xforce.ibmcloud.com/vulnerabilities/74666
http://hg.suckless.org/slock/rev/891a4984aba6
http://secunia.com/advisories/48700
http://www.openwall.com/lists/oss-security/2012/04/06/1
http://www.openwall.com/lists/oss-security/2012/04/06/2
http://www.osvdb.org/81035
http://www.securityfocus.com/bid/52922
https://bugs.gentoo.org/show_bug.cgi?id=401645
https://bugzilla.redhat.com/show_bug.cgi?id=786310
https://exchange.xforce.ibmcloud.com/vulnerabilities/74666